Forem

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The DBXen ERC2771 Exploit: How _msgSender() and msg.sender Confusion Turned 1,085 Staking Cycles Into Instant Cash

The DBXen ERC2771 Exploit: How _msgSender() and msg.sender Confusion Turned 1,085 Staking Cycles Into Instant Cash

1
Comments
5 min read
Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms
Cover image for Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms

Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms

2
Comments 2
11 min read
Auditing Solana Token-2022 Transfer Hooks: The New CPI Attack Surface Your Fuzzer Isn't Catching

Auditing Solana Token-2022 Transfer Hooks: The New CPI Attack Surface Your Fuzzer Isn't Catching

Comments
9 min read
Flash Loan Circuit Breakers: 5 On-Chain Defense Patterns That Would Have Stopped 80% of Q1 2026's $137M in DeFi Exploits

Flash Loan Circuit Breakers: 5 On-Chain Defense Patterns That Would Have Stopped 80% of Q1 2026's $137M in DeFi Exploits

Comments
7 min read
Sovereign AI Agents Need Cryptographic Identity: Here's Why

Sovereign AI Agents Need Cryptographic Identity: Here's Why

Comments
5 min read
Your AI Agent Can Delete Production — Can You Prove It?

Your AI Agent Can Delete Production — Can You Prove It?

Comments
2 min read
Output Provenance: Proving What Your AI Agent Actually Said

Output Provenance: Proving What Your AI Agent Actually Said

Comments
2 min read
EVMbench Deep Dive: Can AI Agents Actually Find Smart Contract Bugs Better Than Human Auditors? We Tested the Claims

EVMbench Deep Dive: Can AI Agents Actually Find Smart Contract Bugs Better Than Human Auditors? We Tested the Claims

1
Comments
7 min read
The XRPL Batch Amendment Near-Miss: How a Loop Exit Bug Almost Let Attackers Drain Any Wallet Without a Private Key

The XRPL Batch Amendment Near-Miss: How a Loop Exit Bug Almost Let Attackers Drain Any Wallet Without a Private Key

Comments
7 min read
Building a Zero-to-Production Solana Security Pipeline in 2026: Trident Fuzzing + Sec3 X-ray + AI Audit Agents in One GitHub Action

Building a Zero-to-Production Solana Security Pipeline in 2026: Trident Fuzzing + Sec3 X-ray + AI Audit Agents in One GitHub Action

Comments
6 min read
Secure AI Agent Architecture
Cover image for Secure AI Agent Architecture

Secure AI Agent Architecture

6
Comments
1 min read
CVE-2026-33017: How a Single HTTP Request to Langflow Lets Attackers Drain Every Crypto Wallet Your AI Agent Touches

CVE-2026-33017: How a Single HTTP Request to Langflow Lets Attackers Drain Every Crypto Wallet Your AI Agent Touches

Comments
6 min read
The Verification Paradox: Why 100% of AI-Assisted Devs Face Incidents

The Verification Paradox: Why 100% of AI-Assisted Devs Face Incidents

2
Comments 3
2 min read
The CrossCurve $3M Bridge Exploit: How One Missing Check Let Attackers Forge Cross-Chain Messages

The CrossCurve $3M Bridge Exploit: How One Missing Check Let Attackers Forge Cross-Chain Messages

2
Comments
5 min read
Supply Chain Key Theft in npm: How 5 Typosquatted Packages Silently Drain Solana and Ethereum Wallets — And a 7-Step Defense Playbook

Supply Chain Key Theft in npm: How 5 Typosquatted Packages Silently Drain Solana and Ethereum Wallets — And a 7-Step Defense Playbook

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.